fcaa1479c3dbb46e3b3b25865432158156cf2dff
max
  Wed Sep 9 08:22:31 2026 -0700
UniProt otto: let notifyRun.sh post to a Slack incoming webhook too

Mail is the reliable channel for a run that takes days, but it does not
necessarily land on a phone. With a Slack incoming webhook in ~/.hg.conf as
slack.webhook=..., each stage note is also posted to that channel. Without the
key, nothing changes and notifications go by mail only.

The URL stays out of the command line, where ps would show it to everyone on the
machine, and out of stdout and stderr: curl runs with -s and a failed post logs
only that it failed. Checked that an absent webhook is a silent no-op, that an
unreachable one warns without killing the watch, and that the URL appears nowhere
in the output.

refs #38300

diff --git src/hg/utils/otto/uniprot/notifyRun.sh src/hg/utils/otto/uniprot/notifyRun.sh
index 7ec73fbf8d5..734918e7dcc 100755
--- src/hg/utils/otto/uniprot/notifyRun.sh
+++ src/hg/utils/otto/uniprot/notifyRun.sh
@@ -1,36 +1,52 @@
 #!/bin/sh
 # Mail a note every time a hand-started doUniprot run reaches a new stage, and once more
 # when it ends. For a run that takes days, this is the difference between knowing where it
 # is and having to go look.
 #
 #   cd /hive/data/outside/otto/uniprot
 #   setsid nohup ./notifyRun.sh you@ucsc.edu > notifyRun.log 2>&1 < /dev/null &
 #
 # The cron run does not need this: doUpdate.sh already mails the outcome through the
 # MAILTO line in otto's crontab. This is for watching a long catch-up run in between.
 
 to=${1:-$USER@soe.ucsc.edu}
 poll=${2:-300}          # seconds between checks
 heartbeat=${3:-43200}   # seconds between "still going" notes when the stage does not change
 
+# Optional Slack incoming webhook, for getting these on a phone. It is a credential, so it
+# is read from ~/.hg.conf (mode 600) and never passed on the command line, where ps would
+# show it to everyone on the machine. Add a line like:
+#     slack.webhook=https://hooks.slack.com/services/...
+# Without it, notifications go by mail only.
+webhook=`grep '^slack.webhook=' $HOME/.hg.conf 2>/dev/null | head -1 | cut -d= -f2-`
+
 dir=/hive/data/outside/otto/uniprot
 log=$dir/lastRun.log
 lock=/hive/data/outside/uniProt/current/doUniprot.lock
 
+slackSend() {
+    [ -z "$webhook" ] && return 0
+    # -s so a webhook failure does not spray the URL into the log
+    printf '{"text": %s}' "\"uniprot otto: $1\"" \
+        | curl -s -m 20 -X POST -H 'Content-type: application/json' --data @- "$webhook" > /dev/null 2>&1 \
+        || echo "`date '+%F %T'` slack webhook post failed" >&2
+}
+
 send() {
     subject=$1
+    slackSend "$subject"
     { echo "run directory: $dir"
       echo "started:       $started"
       echo "now:           `date '+%Y-%m-%d %H:%M:%S'`"
       echo
       echo "last runLog.txt lines:"
       tail -5 $dir/runLog.txt 2>/dev/null
       echo
       echo "last log lines:"
       grep -a " - " $log 2>/dev/null | tail -12
     } | mail -s "uniprot otto: $subject" "$to"
 }
 
 # Work out which stage the log has reached. Later matches win, so the order is the order
 # the pipeline goes through.
 stageOf() {